es with whom personal data will be shared; and (2) a data retention policy governing the duration and terms of storage of personal data, including a description of users' rights concerning the use of their personal data and the process by which users may exercise those rights.4 To cover various forms of technology and the ways in which data can be accessed, collected and processed, the Apps Act sp